Procedure Using an Interface Template to Enable SISF An interface template is a container of configurations or policies. When you apply the interface template to a target, all the configurations are applied to the target. This enables you to configure multiple commands or features on one or more targets. Starting with Cisco IOS XE Amsterdam 17.3.1, you can add the device-tracking policy policy_name global configuration command to an interface template. SISF-based device-tracking is enabled and the policy is applied, wherever the template is applied. Configuring Switch Integrated Security Features Using an Interface Template to Enable SISF Command or Action Purpose Step 1 enable Example:
Device> enable Enables privileged EXEC mode. • Enter your password if prompted. Step 2 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 3 vlan configuration vlan list _ Example: Device(config)# vlan configuration 333 Specifies the VLANs to which the device tracking policy will be attached; enters the VLAN interface configuration mode. Step 4 device-tracking attach-policy policy name _ Example: Device(config-vlan-config)# device-tracking attach-policy example policy _ Attaches the device tracking policy to the specified VLANs across all switch interfaces. Note SISF based device-tracking policies can be disabled only if they are custom policies.
Programmatically created policies can be removed only if the corresponding device-tracking client feature configuration is removed. Step 5 do show device-tracking policies vlan vlan-ID Example: Device(config-vlan-config)# do show device-tracking policies vlan 333 Verifies that the policy is attached to the specified VLAN, without exiting the VLAN interface configuration mode. Step 6 end Example: Device(config-vlan-config)# end Exits VLAN feature configuration mode and returns to privileged EXEC mode. Configuring Switch Integrated Security Features 27